The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
usb: aqc111: check packet for fixup for true limit
If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value.
The driver will then proceed to parse the header located at that position, which will either oops or process some random value.
The fix is to check against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the driver.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-preemptUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-amd | Jun 12, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-oracle-5.4Upgrade linux-nvidia-tegraUpgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.4Upgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-iotUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-nvidiaUpgrade linux-gcp-5.4Upgrade linux-gkeop-5.15Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linux-gkeopUpgrade linux-xilinx-zynqmpUpgrade linux-azure-fdeUpgrade linux-azure-5.4Upgrade linux-lowlatencyUpgrade linux-nvidia-6.5Upgrade linux-oracle-5.15Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-fde-5.15Upgrade linux-kvmUpgrade linux-fips | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 13, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub